Release notes - XPay - September 2026
This month, we’ve been focused on one thing: making your payments and partner experience even more secure. We took a deep dive across our platform from APIs and payment infrastructure to partner portals and reporting, to identify potential security gaps and strengthen our defenses. Every layer was reviewed, tested, and enhanced to help keep your data, payments, and business operations protected.
Stronger Protection Across the Platform
This month, we enhanced security across multiple layers of the XPay platform to strengthen protection against potential security risks and unauthorized access.
These improvements cover key areas across our APIs, internal systems, partner portals, and supporting infrastructure, helping ensure that sensitive information and critical payment operations remain protected.
These enhancements enable XPay to:
-
Strengthen protection across critical platform components.
-
Improve safeguards around sensitive data and business operations.
-
Reduce exposure to potential security risks.
-
Provide merchants with a more secure and resilient payments infrastructure.
By continuously strengthening security across the platform, XPay helps merchants build their payment journeys on a foundation designed with security in mind.
Enhanced API Security & Validation
We have strengthened validation and security controls across key APIs to ensure that requests are properly validated before being processed.
These enhancements add additional layers of protection around critical payment and session-related interactions, helping prevent unexpected or potentially harmful requests from reaching core platform functionality.
For merchants, this means greater confidence in the reliability and security of the APIs supporting their payment experiences.
Stronger Access Controls
We enhanced access controls across key platform components to ensure that sensitive functionality and data are appropriately protected and accessible only to authorized users and systems.
These improvements further strengthen the security of the XPay platform while helping protect merchant information and critical payment operations.
More Secure Reporting & Data Exports
We strengthened security around reporting and data export capabilities to provide additional protection when generating and handling business data.
These enhancements help ensure that exported information remains secure and that reporting workflows are better protected against potentially unsafe inputs.
Enhanced Payment Webhook Protection
We added additional security measures around payment webhook configurations, including stronger URL validation and protection against potentially unsafe destinations.
This provides an additional layer of security for payment-related communications and helps ensure that webhook requests are directed only to trusted and appropriately validated endpoints.
Our Commitment to Secure Payments
Security remains a core part of how we build and evolve XPay. This month's enhancements reflect our ongoing effort to proactively identify potential risks, strengthen our defenses, and improve the resilience of our platform.
As we continue to expand our payment capabilities, we remain committed to providing merchants with a secure, reliable, and trusted payments platform for their businesses and customers.
Milestones - Checklists
-
Raast Payment
-
Google Pay integration with Cybersource & MCB
-
Apple Pay Integration
Note: This is the tentative due date for the milestone features, a minor delay can be faced, but only these feature(s) can be expected to go live in the coming month.